topic Re: FTD 1150 implement rate limit bandwidth in Network Security

FTD 1150 implement rate limit bandwidth

Roberto Casagrande — Fri, 28 May 2021 12:38:15 GMT

Hi,

we have installed a couple of firepower 1150 in substitution of asa 5520.
in the asa I had configured rate limit bandwidth for networks that request internet connection.

Is it possible to configure it without FMC?

Thanks a lot

Re: FTD 1150 implement rate limit bandwidth

balaji.bandi — Fri, 28 May 2021 12:51:19 GMT

check FMC config - hope that help you.

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/quality_of_service__qos__for_firepower_threat_defense.html#id_16325

Re: FTD 1150 implement rate limit bandwidth

Roberto Casagrande — Fri, 28 May 2021 16:57:18 GMT

Thanks but I didn’t see anything

Re: FTD 1150 implement rate limit bandwidth

rschlayer — Tue, 01 Jun 2021 08:35:35 GMT

I believe you have to use FlexConfig on FDM to achieve this. You can use ASA CLI commands for it.

BR
Rick

Re: FTD 1150 implement rate limit bandwidth

Roberto Casagrande — Tue, 01 Jun 2021 09:54:45 GMT

Thanks Rick for support,

but the problem is the commands, some commands not the same of ASA. We have try to transfer the old ASA configuration but nothing, FTD not accept some command

Below the commands of ASA

service-policy inside-policy interface inside
!
!
!
policy-map inside-policy
class inside-class2
police input 80000000 2000000
police output 80000000 2000000
!
class-map inside-class2
match access-list inside_mpc_2
!
!
access-list inside_mpc_2 extended permit object-group DM_INLINE_SERVICE_8 192.168.19.0 255.255.255.0 any
access-list inside_mpc_2 extended permit object-group DM_INLINE_SERVICE_9 any 192.168.19.0 255.255.255.0
!
!
object-group service DM_INLINE_SERVICE_8
service-object tcp-udp
service-object ip
service-object tcp
service-object tcp eq ftp
service-object tcp eq ftp-data
object-group service DM_INLINE_SERVICE_9
service-object tcp-udp
service-object ip
service-object tcp
service-object tcp eq ftp
service-object tcp eq ftp-data

Re: FTD 1150 implement rate limit bandwidth

rschlayer — Wed, 02 Jun 2021 06:17:45 GMT

Yea I am sorry but I believe you cannot create ACLs (not bound to interfaces) in FDM yet.

I would highly recommend going for FMC in that case.